Behavioral task
behavioral1
Sample
NEAS.f2b47750da987f1ad2b710d65c911d60.exe
Resource
win7-20231020-en
General
-
Target
NEAS.f2b47750da987f1ad2b710d65c911d60.exe
-
Size
361KB
-
MD5
f2b47750da987f1ad2b710d65c911d60
-
SHA1
dd45676f4393982b13a1a64cda7c39876ae16ef0
-
SHA256
2b36b9988c5b2e4d17c01ab2127462350675f9b18de5cdfdc005e7a2941a8460
-
SHA512
2cf8ef35dcdd87adac86c12e102abd70e9d0c97d97abcd999f6fbfa6a4ed4bc4bb6e133e3c8f1566938dd85e70b4f8c13a1b40fef60afc6287fa82aaa688412b
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOFltH4tiAlSpgFZAzwdjcIlSpgFZZr3GSz:y4wFHoS3eFplAlSpgFZAKjcIlSpgFZZl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.f2b47750da987f1ad2b710d65c911d60.exe
Files
-
NEAS.f2b47750da987f1ad2b710d65c911d60.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE